根据《客户协议》，管理员活动报告只能用于合法目的。这些报告适用于 Google Workspace、教育版和 ISP 账号。
检索所有管理活动
要检索为账号执行的所有管理活动的报告，请使用以下 GET HTTP 请求并加入授权文档中所述的授权令牌。如需详细了解请求的查询字符串和响应属性，请参阅 API 参考。为确保可读性，以下示例采用回车行格式：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?endTime=a date&startTime=a date
&maxResults=number of events listed on each page of the report
以下示例可获取关于过去 180 天内所有账号管理活动的报告，这是报告可以涵盖的最长期限。maxResults 查询字符串确定此报告的每个报告页面包含两个事件。如需查看 API 响应的示例，请参阅 JSON 响应示例：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?maxResults=2
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?customerId=C03az79cb
按管理员检索所有活动
要检索特定管理员执行的所有管理控制台活动的报告，请使用以下 GET HTTP 请求，并在其中添加授权文档中所述的授权令牌。userKey 是报告中管理员的主电子邮件地址。如需详细了解请求的查询字符串和响应属性，请参阅 API 参考。为确保可读性，以下示例采用回车行格式：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/userKey
/applications/admin?endTime=a date&startTime=a date
&maxResults=number of events listed on each page of the report
&filters=event name parameterrelational operatorparameter value
GET https://admin.googleapis.com/admin/reports/v1/activity/users/john@example.com
/applications/admin?maxResults=2&filters=OLD_VALUE==ALLOW_CAMERA
按事件名称检索所有活动
要检索关于特定事件名称的所有活动的报告，请使用以下 GET HTTP 请求并包含授权文档中所述的授权令牌。如需了解 eventName，请参阅管理员事件名称参考信息。如需详细了解请求的查询字符串和响应属性，请参阅 API 参考。为确保可读性，以下示例采用回车行格式：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?endTime=a date&startTime=a date
&maxResults=maximum number of events returned on a response page
&eventName=name of the administrative event
以下示例检索了有关更改用户姓氏的所有管理控制台实例的报告。如需查看 API 响应的示例，请参阅 JSON 响应示例：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/all
/applications/admin?maxResults=1&eventName=CHANGE_LAST_NAME
按活动和管理员检索所有活动
如要检索管理控制台中由特定管理员对特定活动名称执行的所有更改的报告，请使用以下 GET HTTP 请求，并附上授权文档中所述的授权令牌。userKey 是报告中管理员的主电子邮件地址。如需了解 eventName，请参阅管理员事件名称参考信息。如需详细了解请求的查询字符串和响应属性，请参阅 API 参考。为确保可读性，以下示例采用回车行格式：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/userKey
/applications/admin?endTime=a date&startTime=a date
&maxResults=maximum number of events returned on a response page
&eventName=name of the administrative event
以下示例检索报告，其中包含由 john@example.com 对特定用户姓氏所做的所有管理控制台更改。如需查看 API 响应的示例，请参阅 JSON 响应示例：
GET https://admin.googleapis.com/admin/reports/v1/activity/users/john@example.com
/applications/admin?maxResults=1&eventName=CHANGE_LAST_NAME
{"kind":"reports#auditActivities","nextPageToken":"the next page's token","items":[{"kind":"audit#activity","id":{"time":"2011-06-17T15:39:18.460Z","uniqueQualifier":"report's unique ID","applicationName":"admin","customerId":"C03az79cb"},"actor":{"callerType":"USER","email":"liz@example.com","profileId":"user's unique Google Workspace profile ID","key":"consumer key of requestor in OAuth 2LO requests"},"ownerDomain":"example.com","ipAddress":"user's IP address","events":[{"type":"GROUP_SETTINGS","name":"CHANGE_GROUP_SETTING","parameters":[{"name":"SETTING_NAME","value":"WHO_CAN_JOIN","intValue":"integer value of parameter","boolValue":"boolean value of parameter"}]}]},{"kind":"audit#activity","id":{"time":"2011-06-17T15:39:18.460Z","uniqueQualifier":"reports unique ID","applicationName":"admin","customerId":"C03az79cb"},"actor":{"callerType":"USER","email":"liz@example.com","profileId":"user's unique Google Workspace profile ID","key":"consumer key of requestor in an OAuth 2LO request"},"ownerDomain":"example.com","ipAddress":"user's IP address","events":[{"type":"GROUP_SETTINGS","name":"CREATE_GROUP","parameters":[{"name":"GROUP_EMAIL","value":"helpdesk@example.com","intValue":"","boolValue":""}]}]}]}
[null,null,["最后更新时间 (UTC)：2025-08-29。"],[],[],null,["# Admin Activity Report\n\nThe admin activity report returns information on the Admin console activities of all of your account's administrators. Each report uses the basic report endpoint request with report-specific parameters such as an administrator's name or a specific Admin console event. The maximum time period for each report is the last 180 days.\n\nThe admin activity report may be used only for lawful purposes in accordance with your Customer Agreement. And these reports apply to Google Workspace, Education, and ISP accounts.\n\nRetrieve all administrative activities\n--------------------------------------\n\nTo retrieve a report of all administrative activities done for an account, use the following `GET` HTTP request and include the authorization token described in the [authorization documentation](/workspace/admin/reports/v1/guides/authorizing). For more information about the request's query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). For readability, the following example is formatted with line returns: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?endTime=a date&startTime=a date\n&maxResults=number of events listed on each page of the report\n```\n\nThe following example gets a report on all of your account's administrative activities for the past 180 days which is the maximum time period for a report. And the `maxResults` query string determines this report contains two events per report page. For an example of an API response, see the [JSON response example](#example_response): \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?maxResults=2\n```\n\nThe following example gets a report on all of a customer's administrative activities for the past 180 days. The `customerId` specifies which customer the report is to be retrieved for. \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?customerId=C03az79cb\n```\n\nRetrieve all activities by administrator\n----------------------------------------\n\nTo retrieve a report of all Admin console activities done by a specific administrator, use the following `GET` HTTP request and include the authorization token described in the [authorization documentation](/workspace/admin/reports/v1/guides/authorizing). The `userKey` is the primary email address of the administrator in the report. For more information about the request's query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). For readability, the following example is formatted with line returns: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/userKey\n/applications/admin?endTime=a date&startTime=a date\n&maxResults=number of events listed on each page of the report\n&filters=event name parameter relational operator parameter value\n```\n\nThe following example gets a report on all changes to the Admin console application done by `john@example.com`, and the response is filtered to return any activities which have an `OLD_VALUE` equal to `ALLOW_CAMERA`. For an example of an API response, see the [JSON response example](#example_response). And for information about the activities, see the [administrator event names](/workspace/admin/reports/v1/reference/activity-ref-appendix-a/admin-event-names): \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/john@example.com\n/applications/admin?maxResults=2&filters=OLD_VALUE==ALLOW_CAMERA\n```\n\nRetrieve all activities by event name\n-------------------------------------\n\nTo retrieve a report of all activities for a specific event name, use the following `GET` HTTP request and include the authorization token described in the [authorization documentation](/workspace/admin/reports/v1/guides/authorizing). For the `eventName` information, see the [administrator event names reference information](/workspace/admin/reports/v1/reference/activity-ref-appendix-a/admin-event-names). For more information about the request's query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). For readability, the following example is formatted with line returns: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?endTime=a date&startTime=a date\n&maxResults=maximum number of events returned on a response page\n&eventName=name of the administrative event\n```\n\nThe following example retrieves a report for all Admin console instances of changing a user's last name. For an example of an API response, see the [JSON response example](#example_response): \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/all\n/applications/admin?maxResults=1&eventName=CHANGE_LAST_NAME\n```\n| **Note:** When retrieving by `eventName`, the API retrieves the activities where this event occurred. For each activity, the response includes all of the activity's events including the event specified in the API request.\n\nRetrieve all activities by event and administrator\n--------------------------------------------------\n\nTo retrieve a report of all Admin console changes for a specific event name done by a specific administrator, use the following `GET` HTTP request and include the authorization token described in the [authorization documentation](/workspace/admin/reports/v1/guides/authorizing). The `userKey` is the primary email address of the administrator in the report. For the `eventName` information, see the [administrator event names reference information](/workspace/admin/reports/v1/reference/activity-ref-appendix-a/admin-event-names). For more information about the request's query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). For readability, the following example is formatted with line returns: \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/userKey\n/applications/admin?endTime=a date&startTime=a date\n&maxResults=maximum number of events returned on a response page\n&eventName=name of the administrative event\n```\n\nThe following example retrieves a report for all Admin console changes to a specific user's last name that were done by `john@example.com`. For an example of an API response, see the [JSON response example](#example_response): \n\n```\nGET https://admin.googleapis.com/admin/reports/v1/activity/users/john@example.com\n/applications/admin?maxResults=1&eventName=CHANGE_LAST_NAME\n```\n| **Note:** When retrieving by `eventName`, the API retrieves the activities where this event occurred. For each activity, the response includes all of the activity's events including the event specified in the API request.\n\nAdmin activity report example JSON response\n-------------------------------------------\n\nA successful response returns an [HTTP 200 status code](http://wikipedia.org/wiki/List_of_HTTP_status_codes). Along with the status code, the response returns a report. For the `eventName` information, see the [administrator event names reference information](/workspace/admin/reports/v1/reference/activity-ref-appendix-a/admin-event-names). For more information about the request's URL query strings and the response properties, see the [API Reference](/workspace/admin/reports/v1/reference/activities/list). \n\n```carbon\n{\n \"kind\": \"reports#auditActivities\",\n \"nextPageToken\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003ethe next page's token\u003c/var\u003e\",\n \"items\": [\n {\n \"kind\": \"audit#activity\",\n \"id\": {\n \"time\": \"2011-06-17T15:39:18.460Z\",\n \"uniqueQualifier\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003ereport's unique ID\u003c/var\u003e\",\n \"applicationName\": \"admin\",\n \"customerId\": \"C03az79cb\"\n },\n \"actor\": {\n \"callerType\": \"USER\",\n \"email\": \"liz@example.com\",\n \"profileId\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003euser's unique Google Workspace profile ID\u003c/var\u003e\",\n \"key\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003econsumer key of requestor in OAuth 2LO requests\u003c/var\u003e\"\n },\n \"ownerDomain\": \"example.com\",\n \"ipAddress\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003euser's IP address\u003c/var\u003e\",\n \"events\": [\n {\n \"type\": \"GROUP_SETTINGS\",\n \"name\": \"CHANGE_GROUP_SETTING\",\n \"parameters\": [\n {\n \"name\": \"SETTING_NAME\",\n \"value\": \"WHO_CAN_JOIN\",\n \"intValue\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003einteger value of parameter\u003c/var\u003e\",\n \"boolValue\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003eboolean value of parameter\u003c/var\u003e\"\n }\n ]\n }\n ]\n },\n {\n \"kind\": \"audit#activity\",\n \"id\": {\n \"time\": \"2011-06-17T15:39:18.460Z\",\n \"uniqueQualifier\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003ereports unique ID\u003c/var\u003e\",\n \"applicationName\": \"admin\",\n \"customerId\": \"C03az79cb\"\n },\n \"actor\": {\n \"callerType\": \"USER\",\n \"email\": \"liz@example.com\",\n \"profileId\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003euser's unique Google Workspace profile ID\u003c/var\u003e\",\n \"key\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003econsumer key of requestor in an OAuth 2LO request\u003c/var\u003e\"\n },\n \"ownerDomain\": \"example.com\",\n \"ipAddress\": \"\u003cvar class=\"apiparam\" translate=\"no\"\u003euser's IP address\u003c/var\u003e\",\n \"events\": [\n {\n \"type\": \"GROUP_SETTINGS\",\n \"name\": \"CREATE_GROUP\",\n \"parameters\": [\n {\n \"name\": \"GROUP_EMAIL\",\n \"value\": \"helpdesk@example.com\",\n \"intValue\": \"\",\n \"boolValue\": \"\"\n }\n ]\n }\n ]\n }\n ]\n }\n```"]]
